Outt
Sett
Behavioral task
behavioral1
Sample
629bba0b50ae4adee1d6feebff83aed6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
629bba0b50ae4adee1d6feebff83aed6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
629bba0b50ae4adee1d6feebff83aed6_JaffaCakes118
Size
74KB
MD5
629bba0b50ae4adee1d6feebff83aed6
SHA1
2718123414eb31a796ce7418339d88d564a42cbd
SHA256
4e3792632c9872bdc001435d423ef79455134dff31c67d08fcdaf17225e197b4
SHA512
f087316a41e2ad01babb5d76db0b5ed3bd1849c6a262cd79e2f899e5bb359848f5048710b3876dca1d5b32588eacbdf45b13d3a907174b30f2b0b5fbf7934662
SSDEEP
1536:agF0eiyUcb36gTL+i9UhhwDHvTWDCDggI0O7OtJJ4KgdLFpO6J0b+arT:t2yFzSi9QhwDkd0NJzmXl0b+arT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
629bba0b50ae4adee1d6feebff83aed6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ